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Abstract — Future  access  to  space  vehicles  will  be  required 
to  achieve  a  high  level  of  safety  and  operability.  In  order  to 
achieve  these  goals,  integrated  adaptive  guidance  and  control 
can  be  used  to  recover  a  vehicle  from  off-nominal  conditions, 
such  as  control  effector  failures,  engine  out,  loss  of  engine 
gimbal,  and  so  on.  In  this  work,  a  preliminary  configuration 
for  a  space  access  vehicle  is  defined.  The  vehicle  contains 
five  control  surfaces,  a  body  flap,  two  elevons,  and  two  rud¬ 
ders.  A  guidance  and  control  (G&C)  design  tool  to  rapidly 
assess  the  necessary  control  effort  of  the  vehicle  to  track  its 
flight  trajectory  is  developed.  This  tool  can  be  used  as  part 
of  the  preliminary  design  cycle  in  configuration,  trajectory 
planning,  structural  analysis,  aerodynamic  modelling,  or  con¬ 
trol  surface  sizing.  Given  the  conceptual  configuration  and  a 
desired  trajectory  for  re-entry  flight,  this  G&C  tool  provides 
an  inner-loop  feedback  control  law  and  outer-loop  feedback 
guidance  law  to  track  the  given  trajectory.  The  inner-loop 
control  law,  based  on  dynamic  inversion  with  a  non-linear 
control  allocator,  is  used  to  linearize  the  vehicle  dynamics 
over  its  flight  envelope  and  assign  control  tasks  to  the  avail¬ 
able  control  effectors  to  track  the  desired  roll  rate,  pitch  rate, 
and  yaw  rate.  The  outer-loop  guidance  law  is  based  on  a  back- 
stepping  method  that  transforms  the  trajectory -related  flight 
path  angle  and  desired  bank  angle  into  commands  in  roll  rate, 
pitch  rate,  and  yaw  rate.  Assessment  of  the  vehicle’s  ability 
to  recover  from  control  failures  is  conducted  in  this  work  for 
a  nominal  re-entry  flight.  This  assessment  is  used  to  provide 
inputs  to  configuration  development  to  overcome  any  short¬ 
comings  in  inner-loop  reconfiguration  capabilities. 
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1.  Introduction 

During  the  space  access  vehicle  preliminary  design  process,  it 
is  necessary  to  quickly  and  economically  assess  the  vehicle’s 
ability  to  recover  from  control  effector  failures.  This  paper 
details  a  framework  that  efficiently  incorporates  the  space  ac¬ 
cess  vehicle’s  stability,  guidance,  and  control  considerations 
into  the  initial  configuration  development.  In  this  approach, 
a  well-known,  high-fidelity  trajectory  generator  (Program  to 
Optimize  Simulated  Trajectories),  a  fast  aerodynamic  data 
computation  algorithm  (Missile  Datcom),  and  a  robust,  large 
flight  envelope  control  law  are  integrated  in  the  analysis  and 
assessment  process  to  evaluate  vehicle  performance  in  stabil¬ 
ity,  guidance,  and  control. 

POST  (Program  to  Optimize  Simulated  Trajectories)  is  a  tra¬ 
jectory  computation  program  developed  by  NASA-Langley 
in  the  1970’s  to  support  the  Space  Shuttle  program.  POST 
finds  a  user-defined  optimal  trajectory  based  upon  a  simula¬ 
tion  model  with  performance  and  loading  constraints.  This 
optimal  trajectory  is  a  compromise  between  the  ascent  phase 
trying  to  maximize  the  payload  delivered  to  orbit,  the  entry 
phase  trying  to  limit  re-entry  aerodynamic  heating  and  struc¬ 
tural  loads,  and  the  approach  phase  trying  to  prepare  the  ve¬ 
hicle  for  a  successful  landing.  The  ascent  phase  ends  at  stage 
separation  which  is  defined  as  a  velocity  of  7,000  feet  per  sec¬ 
ond,  a  flight  path  angle  of  20  degrees,  an  angle  of  attack  of 
0  degrees,  and  an  altitude  higher  than  160,000  feet.  During 
this  phase  the  vehicle  is  ascending  rapidly,  passing  through 
the  transonic  sound  barrier,  and  trying  to  reach  stage  separa¬ 
tion  criteria.  The  entry  phase  begins  at  stage  separation  and 
ends  near  the  landing  site  which  is  defined  to  be  an  altitude 
greater  than  15,000  feet  and  a  velocity  greater  than  Mach  0.3. 
During  this  phase,  the  vehicle  typically  experiences  the  peak 
heating,  dynamic  pressure,  and  normal  loads  because  the  ve¬ 
hicle  is  ballistic  and  aerodynamic  controls  are  ineffective.  In 
this  phase  the  vehicle  will  descend  at  a  constant  angle  of  at¬ 
tack  of  35  degrees  and  then  perform  a  pull-up  maneuver  to 
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intercept  a  constant  flight-path  angle  of  12  degrees. 

The  POST  simulation  model  consists  of  a  rocket  engine 
model,  an  aerodynamic  model,  mass  model,  atmosphere 
model,  and  Earth  gravity  model.  All  of  these  models  are 
combined  to  estimate  the  forces  and  moments  exerted  upon 
the  vehicle  over  time.  Typically,  POST  trajectories  use  three 
degrees  of  freedom  to  solve  the  optimization  problem;  there¬ 
fore,  losses  due  to  trim  effects  are  not  considered  and  control 
effectors  may  not  be  sized  appropriately.  In  some  cases,  ve¬ 
hicles  may  appear  to  ’’close”  (correctly  sized  in  terms  of  re¬ 
quired  fuel  and  subsystems)  that  are  actually  not  closed  and 
may  not  be  closeable  (fuel  and  subsystem  growth  rate  is  too 
high).  Therefore,  accurate  sizing  makes  six  degree  of  free¬ 
dom  (6  DOF)  simulations  a  vital  part  of  the  vehicle  design 
process.  Additionally,  the  6  DOF  simulations  provide  higher 
fidelity  results  that  can  be  used  to  impact  other  subsystems 
such  as  the  thermal  protection  system,  main  rocket  engine 
thrust,  and  main  propellant  tank  volume. 

The  aerodynamic  data  of  the  vehicle  can  be  obtained  from 
Missile  Datcom[l],  which  is  a  tool  to  rapidly  estimate  the 
aerodynamics  of  a  wide  variety  of  vehicle  configurations.  The 
predictive  accuracy  of  Missile  Datcom  is  adequate  for  pre¬ 
liminary  designs.  Iterations  on  the  vehicle  configurations  are 
inevitable  since  the  ultimate  shape  of  the  vehicle  will  be  de¬ 
pendent  upon  the  subsystem  being  utilized,  such  as  payload 
size,  propulsion  method,  launch,  and  landing  configurations. 
Once  the  optimal  trajectory  has  been  calculated  by  POST,  for 
a  given  vehicle  configuration  having  the  aerodynamic  prop¬ 
erties  indicated  by  Missile  Datcom,  the  task  of  stabilizing  the 
vehicle  and  tracking  the  optimal  trajectory  is  carried  out  by  a 
control  law.  The  control  law  is  designed  for  the  entire  flight 
envelope  and  can  accommodate  the  drastic  change  in  speed, 
altitude,  and  vehicle’s  mass  properties  during  ascent  and  re¬ 
entry.  These  changes  in  the  flight  environment  result  in  sub¬ 
stantial  variations  in  aero-dynamic  pressure,  stagnation  tem¬ 
perature,  center  of  gravity,  and  moments  of  inertia.  Further¬ 
more,  the  launch  vehicle  is  powered  by  a  propulsion  system 
during  its  ascent  and,  for  a  reusable  vehicle,  may  be  unpow¬ 
ered  during  re-entry.  The  vehicle’s  launch  configuration  and 
landing  configuration  may  also  be  different  from  each  other. 
The  novel  control  law,  in  this  work,  seeks  to  stabilize  the  vehi¬ 
cle  and  track  an  optimal  trajectory  without  the  lengthy  design 
process  or  a  complicated  control  law  gain  scheduling  that  is 
traditionally  required.  The  inputs  to  the  inner-loop  control 
law  are  the  commanded  roll  rate  Pdes,  commanded  pitch  rate 
qdes ,  and  commanded  yaw  rate  r^es.  The  guidance  and  con¬ 
trol  interface  translates  the  bank  angle  command  and  angle  of 
attack  command  into  the  commanded  roll,  pitch  and  yaw  rates 
Pdes,  Qdesi  t des  respectively.  Using  the  output  of  the  control 
law,  the  vehicle  designer  can  assess  vehicle  performance  in 
tracking  the  desired  trajectory  and  make  modifications  to  its 
configuration,  if  necessary.  The  design  process  is  shown  in 
Fig.  1. 

The  main  thrust  of  this  paper  is  to  develop  the  model  and 
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Figure  1.  Space  Access  Vehicle’s  Preliminary  Design  Cycle 


Figure  2.  Preliminary  Configuration  for  A  Space  Access 
Vehicle 


control  law  and  determine  the  ability  of  the  vehicle  to  re¬ 
cover  from  locked  control  effector  failures.  In  other  words, 
to  examine  the  inner-loop  reconfiguration  capabilities  of  the 
nominal  vehicle.  If  the  current  suite  of  control  effectors  is  not 
sufficient  to  recover  from  a  wide  range  of  locked  effectors, 
the  vehicle  configuration/control  effector  suite  can  be  modi¬ 
fied  to  improve  the  reconfiguration  capabilities. 

2.  Vehicle  Modelling 

The  preliminary  configuration  for  a  baseline  space  access  ve¬ 
hicle  is  shown  in  Fig.  2.  The  body,  as  modelled  by  Missile 
Datcom,  consists  of  a  blunted  nose  followed  by  a  cylindri¬ 
cal  afterbody  with  a  17  ft  diameter.  A  single  body  flap  was 
modelled  at  the  base  of  the  body.  There  was  no  modelling  of 
external  rocket  nozzles.  A  straked  wing  with  an  outer  panel 
sweep  of  42°  was  modelled.  Vertical  tails  were  placed  on 
each  wingtip.  Five  control  devices  were  modelled,  two  rud¬ 
ders  (one  on  each  vertical  tail),  two  elevons  (one  on  each 
wing)  and  a  body  flap.  Missile  Datcom  was  used  to  calcu¬ 
late  the  aerodynamic  characteristics  of  the  vehicle.  Missile 
Datcom  is  a  widely  used  engineering  level  code  that  uses  the 
component  buildup  technique  to  predict  vehicle  characteris¬ 
tics.  Code  input  consists  of  body,  wing,  and  tail  geometry, 
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Table  1.  Space  Access  Vehicle  Configuration  Properties 


Fuselage 

Length  (feet) 

102 

Wing  Span 

(feet) 

42 

Weight 

(pounds) 

65,474 

I XX 

lyy 

I zz 

Ixz 

(slug-feet2) 

(slug-feet2) 

(slug-feet2) 

(slug-feet2) 

81,000 

1,322,00 

950,000 

0 

Mach  number,  altitude,  angle  of  attack,  and  control  deflec¬ 
tions.  Control  devices  are  limited  to  all  moving  surfaces  or 
plain  trailing  edge  flaps.  At  each  flight  condition  the  six-body 
axis  force  and  moment  coefficients  are  provided.  Both  theo¬ 
retical  and  empirical  methods  are  included  that  encompass 
the  entire  speed  regime  from  subsonic  to  hypersonic.  Missile 
Datcom  has  been  shown  to  provide  very  good  agreement  with 
experimental  data  for  a  variety  of  configurations.  To  validate 
the  code  for  RLV  type  configurations,  extensive  comparisons 
have  been  made  with  wind  tunnel  data  for  the  X-34  and  X-40 
configurations.  Some  of  the  X-34  comparisons  are  given  by 
Ngo  and  Blake  [2]. 

Moments  of  inertia  for  this  vehicle  were  calculated  using 
Eqs.  1,  2,  and  3  obtained  from  Roskam  [3]. 


I XX  — 

Y (kx  b)2 

a) 

II 

j(ky  If 

(2) 

Izz  = 

^r)2 

9  z 

(3) 

where  b  is  the  span  and  l  is  the  length  of  the  vehicle.  The  non- 
dimensional  radii  of  gyration  (k  factors)  were  taken  from  an 
Air  Force  Research  Laboratory  database  of  re-entry  vehicle 
designs  such  as  the  Space  Shuttle,  X-40,  etc.  Values  used  for 
kx,  ky  and  kz  were  0.150,  0.25  and  0.30  respectively.  This 
method  does  not  give  the  product  of  inertia  so  this  was  as¬ 
sumed  to  be  zero,  that  is,  Ixz  =  0,  Ixy  =  0,  and  Iyz  =  0. 
The  dimensions  of  the  baseline  space  access  vehicle  design 
are  summarized  in  Table  1.  The  control  effectors  limits  are 
shown  in  Table  2. 

3.  Dynamic  Inversion 

The  purpose  of  the  inner-loop  control  system  is  to  accurately 
track  body-frame  angular  velocity  vector  commands.  The 
inner-loop  control  architecture  developed  in  this  work  con¬ 
sists  of  three  major  components:  a  dynamic  inversion  con¬ 
trol  law,  a  control  allocation  algorithm,  and  precompensation. 


Table  2.  Space  Access  Vehicle  Control  Effectors 


Control  Effector 

Deflection  Range 

Left  Elevon 

=b  30° 

Right  Elevon 

±  30° 

Left  Rudder 

=b  30° 

Right  Rudder 

=b  30° 

Body  Flap 

zb  20° 

The  goal  of  dynamic  inversion  in  flight  control  is  to  cancel 
the  wing-body-propulsion  forces  and  moments  with  control 
effector  forces  and  moments  such  that  the  vehicle  can  ac¬ 
curately  track  some  desired  commands.  Dynamic  inversion 
control  laws  [4]  require  the  use  of  a  control  mixer  or  control 
effector  allocation  algorithm  when  the  number  of  control  ef¬ 
fectors  exceeds  the  number  of  controlled  variables,  or  when 
actuator  rate  and  position  limits  must  be  taken  into  account. 
It  is  quite  common  that  the  desired  control  variable  rate  com¬ 
mands  can  be  achieved  in  many  different  ways  and  so  control 
allocation  algorithms  are  used  to  provide  unique  solutions  to 
such  problems  [5].  The  control  allocation  algorithm  is  signif¬ 
icantly  improved  by  including  an  intercept  term  [6] .  To  com¬ 
plete  the  inner-loop,  precompensation  blocks  are  designed  to 
produce  the  desired  closed-loop  dynamics.  For  the  purpose  of 
demonstration,  we  develop  a  dynamic  inversion  control  law 
for  a  vehicle  with  five  control  surfaces.  The  control  surfaces 
include  two  rudders,  two  elevons,  and  a  body  flap.  An  outer- 
loop  control  system  generates  body-frame  angular  velocity 
commands  (pdes>  Qdes>  r des ),  that  the  inner-loop  dynamic  in¬ 
version  control  system  attempts  to  track.  The  dynamics  of 
the  body-frame  angular  velocity  vector  for  this  vehicle  can  be 
written  as 

d;  =  f(w,P)  +g(P,  8)  (4) 

where  u  =  [p  q  r]T,  p,  q,  and  r  are  the  rolling,  pitching,  and 
yawing  rates,  respectively,  P  is  a  vector  of  quantities  that  in¬ 
fluence  the  body-frame  states,  and  8  =  (£i,  82,  •  •  •  ,  Sn)T  is 
a  vector  of  control  surface  deflections.  The  vector  P  con¬ 
tains  variables  such  as  angle  of  attack,  sideslip,  Mach  num¬ 
ber,  and  vehicle  mass  properties.  The  term  g(P,  8)  includes 
the  control  dependent  accelerations,  while  the  term  f(u>,  P) 
describes  accelerations  that  are  due  to  the  base-vehicle’s 
(wing-body -propulsion)  aerodynamic  properties.  The  mo¬ 
ment  equations  for  a  vehicle  in  the  body-frame  [7]  can  be  ma¬ 
nipulated  to  form  control  dependent  and  control  independent 
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terms.  It  is  assumed  that  the  mass  properties  of  the  vehicle 
under  consideration  are  constant,  thus,  the  time  derivative  of 
the  inertia  matrix  can  be  set  to  zero,  i.e.,  1  =  0.  Then,  Eq.  4 
can  be  written  as 

Co  =  I_1(Gb(cj,  P,  d)  —  co  x  Iuj)  (5) 

where 

=  Gbae(oo,P)  +  G*(P,5)  = 


L 

L 

M 

+ 

M 

N 

BAE 

N 

In  Eqs.  5  and  6,  I  is  the  inertia  matrix  and  L,  M,  and  N 
are  the  rolling,  pitching,  and  yawing  moments.  In  Eq.  6, 
Gbae{u,  P)  is  the  moment  generated  by  the  base  aerody¬ 
namic  system  (wing-body -propulsion  system)  and  G<s(P,  S) 
is  the  sum  of  moments  produced  by  the  control  effectors. 
Therefore, 

f (w,  P)  =  I_1[GBae(w,  P)  —  u?  x  loo] 

g(P,6)  =I~1Gs(P,S)  {/) 


In  order  to  utilize  a  linear  control  allocator,  it  is  necessary  that 
the  control  dependent  portion  of  the  model  be  linear  in  the 
controls.  Hence,  an  affine  approximation  is  developed  such 
that 


G*(P,5)«G*(P)5  +  e(P,5)  (8) 

The  term  e(P,  S)  is  an  intercept  term  [6]  for  the  body-axis  an¬ 
gular  accelerations,  which  is  used  to  improve  the  accuracy  of 
linear  control  allocation  algorithms.  Using  Eqs.  4,  7,  and  8, 
the  model  used  for  the  design  of  the  dynamic  inversion  con¬ 
trol  law  becomes 

w  =  f(cj,P)  +  I-1G5(P)<5  +  r1e(P,<5)  (9) 

The  objective  is  to  find  a  control  law,  that  provides  direct  con¬ 
trol  over  co,  so  that  Co  =  Codes •  Hence,  the  inverse  control  law 
must  satisfy 

dories  t(u, P)  -  I“1e(P,  S )  =  l~1Gs(P)6  (10) 

Equation  10  provides  the  dynamic  inversion  control  law  for 
the  body-frame  angular  velocity  vector. 

4.  Control  Allocation 

Since  there  are  more  control  effectors  than  controlled  vari¬ 
ables  and  the  control  effectors  are  restricted  by  position  and 
rate  limits,  a  control  allocation  algorithm  is  necessary.  For  the 
lifting  body  under  consideration,  there  are  three  controlled 
variables,  namely,  roll,  pitch,  and  yaw  rates,  while  there  are 
five  control  surfaces  (left  and  right  rudders,  left  and  right  el¬ 
evators,  and  a  bodyflap).  Hence,  a  control  allocation  scheme 
must  be  used  to  ensure  that  Eq.  10  is  satisfied. 


pseudo-control  commands  (typically  desired  moment  or  ac¬ 
celeration  commands).  The  number  of  pseudo-control  com¬ 
mands  is  always  less  than  or  equal  to  the  number  of  control 
effectors.  Dynamic  inversion  control  laws  and  control  alloca¬ 
tion  algorithms  fit  together  quite  naturally  since  the  pseudo¬ 
control  commands  are  easily  identifiable.  Also,  it  is  quite 
common  that  the  desired  commands  can  be  achieved  in  many 
different  ways  and  so  control  allocation  algorithms  are  used 
to  provide  unique  solutions  to  such  problems. 

To  begin  development  of  the  allocator,  rewrite  Eq.  10  as 

ades  =  Udes  -  f(«,  P)  -  r*e(P,  S )  =  l~1Gs(P)S  =  B<5 

(11) 

where  d^es  are  the  body-axis  accelerations  that  need  to  be 
produced  by  the  control  effectors  and  B  is  the  control  effec¬ 
tiveness  matrix  defined  as 


B  =  I1G5(P)  =  I1 


dL  dL  dL  -| 
dSx  dS2'"  d8n 


dM  dM  m  _  _  dM 
d5i  d82  ddn 


dN  dN  dN 

d<5i  dS2  "  '  d8n  J 


(12) 


The  control  allocation  objective,  in  the  linear  case,  is  to  find 
S  such  that 

ddes  =  B(5  (13) 

subject  to  rate  and  position  limits  on  the  control  effectors. 
Notice  that  Eq.  13  defines  a  linear  subspace  in  the  (d^es,  S ) 
space. 


Equation  13  can  be  posed  as  the  following  optimization  prob¬ 
lem: 


min  JE  =  min  ||B<5  -  ddes ||  1  (14) 

0  O 


subject  to 


5  <5  <6 


(15) 


where  JE  is  the  performance  index  for  the  error  minimiza¬ 
tion  problem,  d,  S  are  the  most  restrictive  lower  and  upper 
limits  on  the  control  effectors,  respectively  and  the  1-norm  is 
selected  so  that  linear  programming  techniques  can  be  used 
to  solve  the  problem  [8].  More  specifically, 


S  =  minify,  S  +  5  At) 
S  =  ma x(SE,  S  —  5 At) 


where  Su  are  the  lower  and  upper  position  limits,  S  is  the 
current  location  of  the  control  effectors,  5  is  a  vector  of  rate 
limits,  and  At  is  the  timestep  or  control  update  rate. 


If  sufficient  control  authority  exists  such  that  JE  can  be  made 
identically  equal  to  zero,  then  it  may  be  possible  to  optimize 
a  sub-objective.  This  optimization  problem  can  be  posed  as 
follows: 


min  Jc  =  min  || W5(^  - 

OO 


Control  allocators  are  used  in  conjunction  with  some  type  of 
feedback  control  law  whose  output  consists  of  one  or  more 
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(17) 


subject  to 


B  S  =  d  des 

S  =  8  +  8 At)  (18) 

d  =  max(^,  S  —  5  At) 

where  is  a  weighting  matrix  and  8P  is  a  preferred  set  of 
control  effector  deflections.  The  problem  posed  in  Eq.  17  is 
termed  the  control  minimization  problem. 

In  practice,  the  two  optimization  problems  given  in  Eqs.  14 
and  17  are  combined  to  form  what  is  known  as  the  mixed 
optimization  problem.  The  mixed  optimization  problem  is 
defined  as 


where  £  G  is  an  as  yet  undetermined  Lagrange  multiplier. 
Taking  the  partial  derivatives  of  H  with  respect  to  6  and  £, 
setting  these  expressions  equal  to  zero,  and  rearranging,  gives 


H  =  W«5  +  i(cTW)T  +  ^Wc  +  (£B)t  =  0 


W  6 


Wc  -  Bt£t 


and 


dH 


=  B<5  -  ddP,  =  0 


=*►  B<5  =  ddes  =►  BW_  Wd  =  ddes 

Substituting  Eq.  23  into  Eq.  24  yields 


(23) 


(24) 


min  JM  =  min  (||B<5  -  ddeJi  +  A  || W5(<5  -  (Sp)^)  (19) 
0  0 

where  the  parameter  A  is  used  to  weight  the  error  and  con¬ 
trol  minimization  problems.  For  this  work,  it  was  determined 
that  A  =  0.01  provided  good  error  minimization  while  still 
driving  the  control  effectors  to  the  preferred  values  when  suf¬ 
ficient  control  authority  existed.  The  advantage  of  the  mixed 
optimization  problem  is  that  it  can  often  be  solved  faster  and 
with  better  numerical  properties  as  compared  to  sequentially 
solving  the  error  and  control  minimization  problems  [5]. 


BW-1[— Wc  —  Bt£t]  =  ddes  (25) 

Solving  for  £T  in  Eq.  25  yields 

V  =  — (BW_1BT)_1  [ddes  +  Be]  (26) 

Substituting  Eq.  26  into  Eq.  23  produces 

W  6  =  -Wc +  BT(BW"1BT)“1  [dries  +  Be]  (27) 
Simplifying  Eq.  27  gives  the  desired  result 


Control  Allocation  Preference  Vector  and  Effector  Failures 


6  =  5P  =  -c  +  W“1Bt(BW“1Bt)“1  [dries  +  Be]  (28) 


As  specified  in  Eq.  19,  a  preference  vector,  Sp,  must  be  se¬ 
lected.  One  difficulty  with  the  linear  programming  frame¬ 
work  for  solving  the  control  allocation  problem  is  that  no 
model  of  the  control  allocator  exists.  This  causes  problems 
when  performing  linear  stability  analysis  as  there  is  no  way 
to  know  the  input/output  relationship  of  the  allocation  algo¬ 
rithm.  Fortunately,  when  sufficient  control  authority  exists, 
the  allocation  algorithm  will  attempt  to  minimize  the  differ¬ 
ence  between  the  control  deflections  and  a  preferred  set  of 
control  deflections.  One  obvious  choice  for  preference  vector 
is  the  pseudo-inverse  solution.  In  this  case,  when  sufficient 
control  authority  exists,  the  control  allocation  algorithm  will 
drive  the  surfaces  to  the  pseudo-inverse  solution.  Hence,  in  a 
robustness  analysis,  the  control  allocator  can  be  replaced  by 
the  pseudo-inverse  solution  (assuming  sufficient  control  au¬ 
thority  exists).  The  pseudo-inverse  solution  is  the  two-norm 
solution  to  the  control  allocation  problem  and  can  be  formu¬ 
lated  as  follows: 


min  -(6  +  c)TW(£  +  c) 
8  2 


(20) 


subject  to 


B<5  =  d, 


des 


(21) 


where  W  is  a  weighting  matrix  and  c  is  an  offset  vector.  To 
solve  this  problem,  first  find  the  Hamiltonian  (H)  such  that 


H  =  -ST  WS  +  -ctW<5+ 
2  2 

V’Wc  +  JcTWc  +  £(B<5  -  ddes) 
Z  A 


Equation  28  gives  the  pseudo-inverse  solution.  It  should  be 
noted  that  if  an  effector  is  offset,  two  items  must  be  taken  into 
account,  position  offset  (— c)  and  the  moments  generated  by 
the  offset  (Be).  For  the  specific  usage  of  the  pseudo-inverse 
control  allocation  solution,  the  weighting  matrix  was  selected 
to  be  diagonal,  such  that, 

W  =  diag  [WriRF  W5lf  WriRR  W,LR  W<5sb  W5bf] 

(29) 

where  ’diag’  represents  a  diagonal  matrix  with  the  entries 
along  the  main  diagonal  being  the  weights  associated  with 
each  control  effector. 

This  control  allocation  formulation  allows  one  to  simulate  a 
control  effector  failure  rather  easily.  A  failure  is  introduced 
by  simply  setting  the  lower  and  upper  positions  limits  on 
the  effected  control  surface  equal  to  each  other.  For  a  failed 
control  surface,  its  effects  must  also  be  accounted  for  in  the 
pseudo-inverse  preference  vector,  which  requires  two  modifi¬ 
cations.  First,  the  location  of  the  failure  must  be  inserted  into 
the  offset  vector.  Here,  the  appropriate  component  of  c  is  set 
to  the  negative  of  the  failure  position.  Second,  the  appropri¬ 
ate  entry  in  the  weighting  matrix,  W,  needs  to  be  increased. 
Nominally,  the  entries  in  W  are  one  and  an  increase  in  the 
value  will  place  more  penalty  on  usage  of  that  particular  sur¬ 
face. 


(22) 
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Figure  3  shows  the  inner-loop  control  law  block  diagram.  The 
dynamic  inversion  control  law  is  formed  at  a  summing  junc¬ 
tion  followed  by  allocation  of  control  effector  commands.  A 


Figure  3.  Inner-Loop  Control  Law  Block  Diagram. 


Figure  4.  Guidance  and  Inner-Loop  Control  Law  Interfaces. 


For  the  lateral  channels,  the  roll  rate  command  is  simply  the 
result  of  a  proportional-integral  operation  on  phi  error.  Thus, 


part  of  the  control  law  not  covered  in  this  work  is  the  pre¬ 
filter.  The  prefilter  is  used  to  shape  the  dynamic  response  of 
the  system  and  to  provide  robustness.  Here,  a  first-order  ex¬ 
plicit  model  following  prefilter  is  used  so  that,  under  perfect 
conditions,  the  roll,  pitch,  and  yaw  rate  signals  act  like  the 
outputs  of  first-order  lag  transfer  functions. 

5.  Guidance  Loops 

The  guidance  loops  developed  in  this  work  have  as  inputs  an¬ 
gle  of  attack  error  ae  and  euler  angle  phi  error  (pe  and  provide 
as  outputs  the  commanded  roll,  pitch,  and  yaw  rates.  A  back- 
stepping  approach  is  used  to  move  from  the  angle  of  attack 
and  phi  loops  to  the  body-axis  rate  loops. 

To  derive  the  pitch  rate  command,  the  governing  equation  of 
motion  is 

7  =  0 -a  (30) 

Therefore, 

a  =  6-  7  (31) 

By  definition, 

0  =  q  cos  p  —  rsinp  (32) 

and 

7=^-^c“7  (33) 

where  L  is  the  total  vehicle  lift,  m  is  the  mass,  V  is  the  ve¬ 
locity,  and  g  is  the  acceleration  due  to  gravity.  Substituting 
Eqs.  32  and  33  into  Eq.  31  yields 

a  =  q  cos  <p  —  r  sin  <p - —  +  cos  7  (34) 

mV  V 

From  dynamic  inversion,  the  pitch  rate  command  becomes 

Qdes  =  sec  (fa  ^ ades  +  rsmcfa  +  -V  -  ^  cos  7^  (35) 

The  desired  angle  of  attack  dynamics  are  defined  by  the  fol¬ 
lowing  proportional-integral  control  on  a  error: 

^ des  =  i^Pcx  b  ~  ^  ( P^des  (36) 


Pdes  =  (kp,  +  byj  (fides  ~  (fa)  (37) 

From  the  coordinated  turn  equations,  the  yaw  rate  command 
is  computed  using 

rdes  =  P  tan  a  +  jj  sin  (fa  (38) 

Equations  37,  35,  and  38  define  the  commanded  or  desired 
body  axis  rates  generated  from  errors  between  the  actual  and 
desired  angle  of  attack  a^es  and  desired  roll  angle  pdes  • 

Figure  4  shows  the  interface  between  the  guidance  and  inner- 
loop  control  laws.  The  guidance  loop  takes  ades  and  pdes  as 
inputs  and  produces  commands  to  the  inner-loop  in  the  form 
of  Pdes>  Qdes>  and  rdes •  The  inner-loops’  task  is  to  then  track 
these  body-axis  angular  rates.  The  feedback  lines  represent 
the  numerous  variables  that  each  loop  requires. 

6.  Nominal  Simulation  Results 

In  this  section,  we  will  use  the  above  aforementioned  meth¬ 
ods  to  simulate  a  guidance  and  control  law  for  the  nominal 
vehicle.  Given  a  re-entry  trajectory,  a  POST  simulation  out¬ 
puts  the  desired  angle  of  attack  ades  and  desired  roll  angle 
<pdes  as  part  of  its  calculations.  A  guidance  law  based  on  the 
backstepping  method  discussed  in  section  5  is  designed  to 
convert  the  desired  angle  of  attack  ades  and  desired  roll  angle 
( pdes  into  the  commanded  roll  rate  pdes  >  the  commanded  pitch 
rate  qdes  and  the  commanded  yaw  rate  rdes  •  The  commanded 
body-axis  rates  pdes ,  Qdes ,  r des,  in  turn,  are  converted  into  re¬ 
quired  control  deflections  by  the  dynamic-inversion  control 
law  mentioned  in  section  3.  A  control  allocator  based  on 
the  discussion  in  section  4  assigns  the  required  control  de¬ 
flections  over  the  control  effectors  according  to  their  avail¬ 
able  capabilities.  The  tracking  performance  of  the  control 
law,  under  nominal  conditions,  is  shown  in  Fig.  5.  Track¬ 
ing  errors  Pdes  PactuaU  Qdes  QactuaU  T des  ^ actual  are 

small.  These  small  errors  are  desired  and  expected  since  our 
design  method  is  formulated  to  directly  track  Pdes,  Qdes ,  r des  • 
The  commanded  and  actual  Euler  angles  are  shown  in  Fig.  6. 
Tracking  of  (p  is  excellent  since  this  variable  is  directly  used 
in  the  guidance  loops.  Since  the  control  law  does  not  explic¬ 
itly  attempt  to  track  6  or  ip,  it  is  expected  that  tracking  errors 
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Figure  5.  Roll  Rate,  Pitch  Rate,  and  Yaw  Rate  Tracking 
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Figure  7.  Left  Elevon,  Right  Elevon,  Body  Flap  Deflections 
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Figure  6.  Rolling  Angle,  Pitch  Angle,  and  Yaw  Angle  Figure  8.  Left  Rudder  and  Right  Rudder  Deflections 

Tracking 


will  exist  in  these  time  histories.  In  Figs.  7  and  8,  the  control 
deflection  activities  of  the  left  elevon,  right  elevon,  left  rudder 
and  right  rudder  are  reasonable  without  exceeding  its  rate  and 
position  limits.  It  is  noted,  however,  that  the  pitch  flap  briefly 
saturates  at  its  deflection  limit.  Figure  9  shows  the  velocity, 
angle  of  attack,  sideslip  angle,  and  flight-path  angle  time  his¬ 
tories.  Angle  of  attack  tracking  is  very  good,  as  expected, 
since  a  is  a  variable  which  is  directly  tracked  by  this  control 
law. 

7.  Inner-Loop  Reconfiguration 
Simulation  Results 

In  this  section,  the  ability  of  the  vehicle  to  recover  from 
locked  control  effectors  is  examined.  Only  one  of  the 
left/right  pair  of  effectors  is  failed  and  the  assumption  is  made 
that  the  same  ability  to  recover  the  vehicle  exists  for  the  other 
effector  in  the  pair  (due  to  symmetry).  Even  though  the  tra- 


Figure  9.  Velocity,  Angle  of  Attack,  Side  Slip  Angle,  and 
Flight  Path  Angle  Tracking 
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jectory  does  not  specify  wings-level  flight,  assuming  the  same 
recovery  ability  exists  for  a  symmetric  pair  of  effectors  is  suf¬ 
ficient  for  this  stage  of  the  work.  It  should  also  be  pointed 
out  that  the  range  of  recoverable  failures  is  highly  depen¬ 
dent  on  the  initial  conditions  and  trajectory  selected  for  flight. 
In  order  to  make  a  definitive  statement  about  the  control  re¬ 
configuration  capabilities,  more  work  would  need  to  be  per¬ 
formed,  utilizing  different  initial  conditions  and  trajectories. 
The  work  presented  here  is  a  first  cut  at  evaluating  the  control 
reconfiguration  capabilities  of  this  vehicle. 

To  begin,  failure  of  a  single  elevon  is  considered.  The  range 
of  recoverable  elevon  failures  is  about  —10°  to  —5°  for  the 
nominal  re-entry  profile  in  this  work.  Figures  10  and  1 1  show 
the  body-axis  rate  tracking  for  a  failed  left  elevon  at  —10° 
and  —13°.  When  the  left  elevon  is  failed  at  —10°,  the  vehicle 
can  recover  and  near  nominal  performance  is  achieved  using 
reconfigurable  inner-loop  control  (see  Fig.  10).  Here,  starting 
at  about  360  seconds,  there  is  a  period  of  poor  pitch  rate  track¬ 
ing.  This  is  directly  attributable  to  the  body  flap  saturating  for 
about  40  seconds.  At  about  400  seconds,  the  body  flaps  moves 
off  of  its  position  limit  and  quality  pitch  rate  tracking  returns. 
When  the  failure  occurs  at  —13°,  the  vehicle  can  no  longer 
track  the  nominal  commands,  as  seen  by  the  divergence  in 
pitch  rate  tracking  in  Fig.  1 1 . 

For  rudder  failures,  a  large  envelope  of  recoverable  failures 
exists.  In  fact,  the  vehicle  can  tolerate  left  or  right  rudder 
failure  between  —23°  and  26°  (nearly  the  entire  deflection 
range). 

In  terms  of  reconfigurable  control,  the  current  bodyflap  is 
problematic.  The  vehicle  cannot  tolerate  a  failure  of  the 
bodyflap  at  any  location  and  Fig.  12  shows  the  roll,  pitch,  and 
yaw  rate  tracking  for  the  bodyflap  failed  at  0°.  The  bodyflap 
is  the  primary  pitching  moment  device  and  without  it,  the 
vehicle  cannot  simultaneously  produce  the  required  rolling, 
pitching,  and  yawing  accelerations.  In  light  of  the  issues  with 
recovering  from  bodyflap  failures,  a  configuration  redesign 
for  the  vehicle  is  necessary.  One  way  to  alleviate  this  is¬ 
sue  is  to  split  the  bodyflap  into  two  independent  devices,  a 
left/right  pair.  Essentially,  this  adds  redundancy  to  the  pitch¬ 
ing  moment  capabilities  of  the  vehicle.  Now,  when  one  of  the 
bodyflap  pair  fails,  the  vehicle  can  recover  nominal  perfor¬ 
mance.  Figure  13  shows  the  roll,  pitch,  and  yaw  rate  tracking 
when  the  left  bodyflap  is  failed  at  0°.  Clearly,  the  vehicle  has 
recovered  nominal  performance  and  by  splitting  the  bodyflap 
into  two  devices,  additional  redundancy  has  been  included. 
Figures  14  and  15  show  the  control  effector  deflections  for 
this  case.  Here  it  can  be  seen  that  the  left  bodyflap  is  at  0° 
for  the  entire  simulation  run  while  the  right  bodyflap  is  free 
to  move. 

Since  the  elevons  have  a  relatively  small  range  of  failures  for 
which  nominal  performance  can  be  recovered,  a  future  con¬ 
figuration  change  to  the  vehicle  would  be  to  split  the  elevons, 
much  like  the  bodyflap.  Splitting  control  effectors  into  two  or 
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Figure  10.  Roll,  Pitch,  and  Yaw  Rates  vs.  Time  for  Failed 
Left  Elevon  at  —10°. 


PAR 


Time  (sec) 

Figure  11.  Roll,  Pitch,  and  Yaw  Rates  vs.  Time  for  Failed 
Left  Elevon  at  —13°. 


more  independent  devices  increases  the  control  redundancy. 
The  downside  to  this  is  that  complexity  and  weight  of  the  ve¬ 
hicle  most  likely  increases,  i.e.,  more  actuators  and  hardware 
are  necessary. 

8.  Conclusions 

In  this  work,  a  rapid  assessment  tool  for  space  access  vehi¬ 
cle  configurations  in  guidance  and  control  performance  was 
presented.  The  re-entry  trajectory  was  found  using  a  well- 
known,  high-fidelity  trajectory  generator.  To  track  this  trajec¬ 
tory,  an  inner-loop,  reconfigurable  control  law  was  designed 
for  a  re-entry  vehicle  with  five  control  surfaces.  The  con¬ 
trol  law  utilized  a  dynamic  inversion  controller  and  a  linear 
programming  based  control  allocation  algorithm.  Evaluation 
of  the  vehicle’s  ability  to  recover  from  failures  showed  that 
a  small  range  of  single  elevon  failures  were  recoverable,  a 
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Figure  12.  Roll,  Pitch,  and  Yaw  Rates  vs.  Time  for  Failed 
Body  Flap  at  0°. 
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Figure  14.  Left  Elevon,  Right  Elevon,  and  Left  BodyFlap 
vs.  Time.  Split  BodyFlap.  Failed  Left  BodyFlap  at  0°. 
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Figure  13.  Roll,  Pitch,  and  Yaw  Rates  vs.  Time.  Split 
BodyFlap.  Failed  Left  BodyFlap  at  0°. 
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Figure  15.  Left  Rudder,  Right  Rudder,  and  Right  BodyFlap 
vs.  Time.  Split  BodyFlap.  Failed  Left  BodyFlap  at  0°. 


large  range  of  single  rudder  failures  were  recoverable,  and 
no  bodyflap  failures  were  recoverable.  It  was  thus  neces¬ 
sary  to  consider  modifications  to  the  vehicle  such  as  splitting 
the  bodyflap  into  two  control  effectors.  After  splitting  the 
bodyflap  into  a  left/right  pair,  the  vehicle  could  then  tolerate 
a  single  bodyflap  failure.  Using  the  tool  detailed  in  this  pa¬ 
per,  such  modifications  of  the  vehicle  can  be  accommodated 
during  the  early  design  stages  to  incorporate  the  guidance  and 
control  requirements. 
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